GEIS-新闻详情

Bank trainees role-play as malware hackers in new training course to spot, assist scam victims

2024-03-26 00:00:00.0 海峡时报-新加坡原网页

SINGAPORE - During an anti-scam training session for UOB front-line personnel, participants were presented with two deepfake videos featuring Communications and Information Minister Josephine Teo speaking in Parliament.

When asked, several of the bank employees quickly noted that the first video – created with the help of a voice actress mimicking Mrs Teo’s speech – sounded unnatural.

No one flagged the second video, which was made for the class with artificial intelligence.

Minister of State for Home Affairs Sun Xueling, who joined UOB trainees for the session on March 26, noticed that both videos of Mrs Teo were fake.

“I must say that because I know (Mrs Teo), I am attuned to how her voice sounds,” she told the class.

“But if this was shown to any member of the public, they might not naturally be (suspicious of) either video,” said Ms Sun, adding that the exercise was an indicator of how convincing deepfake technology has become.

The example was an exercise in a new two-day course, jointly developed by Singtel, UOB and the Singapore Institute of Management (SIM). It offers large enterprises a customised training programme to help their staff spot and manage scams, including malware scams and deepfake scams, which are growing in prominence.

Get a round-up of the top stories to start your day

Thank you!

By signing up, I accept SPH Media's Terms & Conditions and Privacy Policy as amended from time to time.

Yes, I would also like to receive SPH Media Group's SPH Media Limited, its related corporations and affiliates as well as their agents and authorised service providers.

marketing and promotions.

Front-line staff need to be familiar with such scams because of the rise of deepfake technology in particular, which is hard to spot and could be used to trick victims to make transactions on their behalf, Singtel Cyber Security Institute director Wilson Tan told the media during the programme’s launch at the institute in Tampines.

“These are things that bank tellers need to verify and not just rely on what they hear,” he said.

The Defence Against Cyber Scams programme is part of a shared-revenue partnership between Singtel and SIM. Eligible participants will be subsidised by up to 90 per cent of the $2,880 course fees under the SkillsFuture Singapore scheme, depending on their age.

UOB is the first participant of the course, which is aimed at insurance firms amid a spike in insurance-related scam cases where victims are duped into terminating their insurance schemes prematurely.

Ms Janet Young, UOB’s managing director and group head of channels and digitalisation, said the collaboration adds on to the bank’s ongoing training programmes for staff and allows the partners to share resources and knowledge in dealing with cyber scams.

Hands-on with malware

Trainees were paired for a hands-on session to configure and send malware to hack a burner phone in a controlled setting to understand the typical tricks scammers use, allowing them to ask the right questions to identify potential scams.

Malware scams ranked among the top 10 scams of concern in 2023 and were used by fraudsters to steal at least $34.1 million, said the police.

During the training, instructors led participants through a simulation of a malware program that allowed them to choose which phone functions they could potentially access, like camera, microphone, storage or text, in a controlled environment.

Instructors from SIM and Singtel repeatedly reminded trainees not to scan the link using their own phones as this would embed them with a virus.

Trainees were paired up and they sent virus-laden malware to hack their partner’s phone in a controlled setting to understand the typical tricks scammers use. PHOTO: LIANHE ZAOBAO

Once installed, the attacker could see footage covertly streamed from the camera of the hacked device and read private information in the phone’s logs.

In an address to participants, Ms Sun said the course can help equip staff with the skills needed to spot and thwart scams, which duped at least 100 victims daily, based on the police’s scam statistics for 2023.

“Last year, 92 per cent of scam losses, or about $600 million, were driven by scams using social engineering and deception,” she said.

“Scammers manipulated the victims into transferring the money and this makes it difficult for the banks because it is, in a way, authorised by the victims...

“This deeper understanding of the technical, psychological and emotional vulnerabilities can better equip all officers with knowledge and skills to identify, report and intervene to prevent scams,” she said.

A trainee, UOB assistant branch manager Gina Yeo, 33, said the course has helped her become more familiar with the tactics scammers use and to ask targeted questions when speaking to potential victims.